Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add logout endpoint to Authentication Service #78

Closed
dariogmori opened this issue Mar 4, 2024 · 5 comments
Closed

Add logout endpoint to Authentication Service #78

dariogmori opened this issue Mar 4, 2024 · 5 comments
Assignees

Comments

@dariogmori
Copy link
Contributor

No description provided.

@dariogmori dariogmori self-assigned this Mar 4, 2024
@jjgancfer
Copy link
Contributor

A logout endpoint to the webapp should also be added.

@dariogmori
Copy link
Contributor Author

For the logout endpoint the following approach was chosen in #87 :
When called the /logout method will delete the refresh token from the database, no longer allowing for its refresh until /login is called again. The JWT token though, will not be invalidated and shall expire naturally. Due to the short lifespan nature of the JWT tokens (1hour or so) this does not represent a significant security flaw and simplifies implementation.

@jjgancfer
Copy link
Contributor

The API logout endpoint has already been merged into develop.

@dariogmori
Copy link
Contributor Author

The login and logout should be fixed since they dont redirect to the proper things in the frontend.

@gony02
Copy link
Contributor

gony02 commented Mar 10, 2024

Right now, the logout is working.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants